IEEE 802.1X Expert in Germany
in minutes with the power of AIHire experts who design port-based network access control, configure RADIUS servers, and roll out enterprise PKI architectures. Vetted and available specialists matched quickly to your infrastructure needs.
Meet FRATCH Experts in Germany, who have recently used IEEE 802.1X
Christian R.
Last position:
Project Manager, Outlook and Teams Rollout at BWI
- Gathering information
- Creating rollout wave concepts
- Coordinating employees
- Monitoring and managing activities
- Project management including analysis and reporting to the board
- Creating instructions and specifications
- Training floorwalkers
- Supporting the rollout on site
- VIP support
- Introducing SharePoint
Christian D.
Last position:
Managing Director and Senior Consultant at business-security (b-sec®) GmbH
- Conceptual consulting for securing business processes
- Consulting for planning and implementing IT and IT security projects
- Security and policy checks, process optimization, contingency planning
- Project management and interim management in IT infrastructure and information security
Overview of relevant projects:
- 2025: Consulting on a DLP concept and for Digid GmbH.
- 2025: Consulting for a customer after a cybersecurity attack in which the IT infrastructure was compromised and the attacker gained M365 tenant admin rights. Investigation and recovery of the IT infrastructure. Preparation of recommendations for increasing IT security.
- 2025: Continuation of the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
- 2024: Preparation of a DNS concept including consulting on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones and automation. Preparation of a DHCP concept including consulting on DHCP design, the central DHCP management system and automation. Consulting on the operation of the products mentioned, operating processes, and adapting the IT documentation and IT service description for Thyssenkrupp Marine Systems.
- 2024: Analysis and assessment of the network and security infrastructure established by the providers with regard to the overall architecture, consisting of the design and components. Development of proposed solutions to improve current operations, maximize performance and security, and reduce complexity. Presentation of the results, their causes and possible solutions to C-level management, including the required decision templates. Development of a SASE concept based on a Zero Trust architecture for Norddeutsche Landesbank.
- 2024: Continuation of the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
- 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proof-of-concepts for DDoS protection and Digital Experience Monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on Zero Trust, redesigning a Cisco ISE implementation and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
- 2023: Continuation of the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Bundesanstalt für Geowissenschaften und Rohstoffe (until 05/2023) and Union Investment IT-Services GmbH (until 07/2023).
- 2022: Preparation and review of white papers for infrastructure and security architectures, planning new network infrastructures for Deutsches Luft- und Raumfahrtzentrum.
- 2022: Development of a concept for the technical and process-related modernization of a disaster recovery plan for United Nations Volunteers.
- 2022: Development of a concept for moving measurement data to a cloud environment, introducing Network Access Control and conducting an awareness training session for Digid GmbH.
- 2022: Development of a network segmentation concept for DZ Hyp AG.
- 2022: Development of a network segmentation concept for Bundesagentur für Arbeit.
- 2021: Development of a new load balancer architecture for Bundeswehr Fuhrparkservices GmbH.
- 2021: Vulnerability scan and penetration test of a web frontend, including evaluation and preparation of recommendations for remediation, taking risk and probability of occurrence into account, for customer ifi GmbH.
- 2021: Consulting, concept development and sub-project management for introducing a Network Access Control solution (certificate authentication and MAC address bypass) and macro-segmentation (area and zone concept based on dynamic assignment of endpoints) in office and production IT for customer Vaillant Group GmbH.
- 2021: Upgrade and optimization of the LAN and WLAN infrastructure for customer United Nations Volunteers.
- 2021: Development of a target concept for modernizing the IT security infrastructure consisting of the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet access, admin and management networks and wireless LAN, including support during implementation, for Bundesanstalt für Geowissenschaften und Rohstoffe.
- 2021: Creation of a micro-segmentation concept based on Cisco DNA and SGT and Zero Trust for Union Investment IT-Services GmbH.
- 2021: Review and update of ISMS Level-3 policies and preparation of process instructions for customer Software AG.
- 2021: Project management for the global Tec-Refresh project Meraki WLAN 2.0, coordination of outsourcing the LAN/WLAN infrastructure to a managed service provider and preparation of a WLAN concept for automated guided vehicles for customer Heraeus Infosystems GmbH.
- 2021: Project management and technical support for the “Transition of SIEM/SOC Services” project of a customer into a shared environment and assumption of the interim role of Head of Security Operations at customer Datagroup SE.
- 2021: Workshop for a future implementation of Mobile Device Management at customer Allgeier Experts Go GmbH.
- 2021: Sub-project management for introducing a rule management tool for firewalls and recertifying NAC endpoints based on 802.1x and MAB at customer Union Investment IT-Services GmbH.
- 2020: Development of a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
- Recording and analysis of the current network architecture, including project initiation.
- Development of a concept for micro-segmentation in the data center and access network.
- 2020: Infrastructure and security architecture audit for customer Stuttgarter Versicherung AG.
- Analysis of the IT infrastructure and IT security architecture with regard to the configuration of network and security components. Additional review of contracts, process descriptions and manuals for completeness. Development of recommendations to improve the stability and operation of the infrastructure. Preparation of a network segmentation concept and project management for implementing the measures from the analysis project.
- 2020: Consulting on setting up an ISMS-Light for customer Josera foodforplanet GmbH & Co. KG.
- 2020: Security architecture consulting for customer Datagroup SE.
- Development of a future IT infrastructure and IT security architecture.
- Analysis of the current IT architecture of all 23 companies.
- Recommendations for optimizing the IT infrastructure and preparation of a comparison between a classic perimeter security concept and the Zero Trust model.
- Preparation of a security zone concept.
- Preparation of an IT infrastructure architecture in coordination with all companies.
- 2018 - 2019: Stream Lead in the Cyber Security program of Deutsche Lufthansa AG.
- Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
- Project area: Network Segmentation and Access Control.
- Project area: Security Architecture.
- Project area: Privileged, Identity & Access Management.
- Project area: Simplify User Authentication (MFA).
- Project area: Mobile & Endpoint Security.
- Project area: OT Security.
- Project area: E-enabled Aircraft.
- 2018: Security architecture consulting for customer Deutsche Lufthansa AG.
- Project management for the development, evaluation and management of the company-wide information security architecture.
- Development of a security strategy and roadmap to align the security architecture with the Zero Trust model.
- Evaluation of security solutions, services and tools available on the market.
- Definition of requirements for RfPs and evaluation of offers.
- Development, maintenance and monitoring of security architecture artifacts.
- Conducting security assessments of existing and new IT systems and security services.
- 2018: ISMS consulting for customer GLS IT Services GmbH.
- Consulting on introducing and initially operating an ISMS based on ISO27001.
- Auditing the IT environments of the GLS country companies.
- Analysis and assessment of IT security risks and derivation of required measures.
- Development of proposed solutions in coordination with the relevant stakeholders.
- Project management and transition of the ISMS to later operations.
- 2016 - 2018: Security Pre-Sales Consultant for customer Cisco Systems GmbH.
- Nationwide strategic and conceptual consulting for major enterprise customers and financial and insurance customers on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch and ISE.
- 2017 - 2018: Design and implementation of an ISMS for customer Verivox GmbH.
- Conducting various BIAs and GAP analyses.
- Preparation of security policies based on ISO 2700x.
- Assumption of the interim role of Information Security Officer.
- 2017: Preparation of a contingency concept for VPV Lebensversicherungs-AG.
- Review and update of the IT contingency manual.
- 2016: Consulting and project management for the design of cloud and hosting services for customer Vodafone Group Services GmbH.
- Analysis and optimization of the sell-build-run process.
- Preparation of detailed-level designs for cloud products.
Minh Duc V.
Last position:
Senior System Engineer Network & Security at F.S. Fehrer GmbH & Co. KG
- Responsible for the configuration, maintenance, monitoring, troubleshooting, and optimization of the IT infrastructure, including Extreme Networks, SD-WAN, and Fortinet security solutions, at all international company locations in Europe and North America
- Development of a comprehensive strategic roadmap to optimize the network architecture, including VLANS, NAC, QoS, firewall configurations, VPNs, DPI, NGFW, threat intelligence, and SSL/TLS inspection
- Implementation of the OneIT strategy through the introduction of new technologies such as Cisco DNA Center, ExtremeCloud IQ, FortiOS, FortiManager, and FortiAnalyzer, which increased employee skills and the efficiency of the IT systems
- Integration of IT and OT systems to optimize the network and security architecture and improve operational efficiency
Hisham E.
Last position:
System Engineer Network & Security at Isringhausen GmbH
- Operation, maintenance and administration of the global network & security system landscape
- Troubleshooting and support in 2nd & 3rd levels and provide technical advice to other dept.
- Configuration of complex LAN/WAN/SD-WAN and WLAN network infrastructures (N5K, N9K, ASR 8000, Wireless Controller WLC9800, AP C91xx and VMware Velo Cloud)
- Control of external service providers as part of service and escalation management
- Implementation and monitoring of system updates (software upgrades, minor/major changes)
Christoph R.
Last position:
IT Consultant at Augusta Solutions
- Successfully certified as Professional Scrum Master (PSM I)
- Further training in AI trends, prompt engineering, and tools (ComfyUI, SD3.5, Flux, Loras)
- Market analysis for the strategic realignment of the service portfolio
Konstantinos M.
Last position:
IT-Fly Specialist – Global Rollout at Lufthansa Group
Plan & Prepare (Site Design & Readiness): Inventory & Design: Dell PowerEdge R-Series, Aruba Switches (L2/L3), Notebooks/Peripherals; Serial Numbers/Asset Tags, IPv4/IPv6 Addressing, VLAN/DHCP/DNS Plan
Runbooks/MOPs: Site Rollout Runbook, Backout Strategy (<15–30 min), Risk Register, Communication Matrix; Approvals via CAB/Change
Images/Packages: Golden Image (Win10/11), Driver Packs, BIOS/UEFI Baseline; O365/Teams/OneDrive-KFM; BitLocker Policies; MECM/SCCM, Intune/Autopilot, MDT/WinPE
Logistics: Shipping/Customs Clearance, RMA/DOA, On-Site Spares; Tools (Barcode Scanners, Label Printers), "Go-Bag" (Cables, SFPs, Console Cables)
Deliver (On-Site Implementation): Endpoints: Swap & Migration (USMT/OneDrive KFM), Peripherals (ATB/BT Printers, Scanners, Boarding Gate HW); Domain Join, Compliance Checks, O365 Activation, Printers/Queues, Network Drives
Acceptance: Functional Tests for DCS/CUTE/CUPPS/CUSS Stations, Ticketing/Check-in Workflows, Boarding Gates
Servers (R-Series): Rack & Stack, Cabling (PDU Redundancy, Fiber/Copper), Labeling/Nomenclature; Firmware/RAID (PERC), Lifecycle Controller, iDRAC Network; Windows Server 2022/2025 + CIS/BSI Hardening; Agents (Backup/AV/EDR/Monitoring), Time Service/NTP Auth, Syslog/SNMPv3
Network (Aruba): VLANs, LACP Trunks, MSTP Root; Portfast + BPDU-Guard at Edge; QoS (EF/AF); Dual-Stack (v4/v6), DHCP Relay. NAC/802.1X with ClearPass/Radius/TACACS+, Roles + MAB Fallback; Guest Isolation, ACLs (Guest→Mgmt deny). Telemetry: sFlow, SNMPv3, Syslog→SIEM; LLDP→Inventory/CMDB
Airport-Specific: CUTE/CUPPS/CUSS Terminals; DCS/Amadeus/SITA Connectivity; FIDS (read-only); Bag Tag/Boarding Pass Printing; Changes During Off-Peak/Night Windows
Stabilize (Hypercare): First-Day Support, KPI Tracking (Login Times, Ticket Volume, Error Classes), QoS Fine-Tuning
Troubleshooting: Wireshark/iperf, Event Logs, Switch Counters, sFlow Flows; Fast Incident Handling as SPOC
Knowledge Transfer: Short Training Sessions for Station Teams, Mini-Runbooks (Incident/Recovery)
Close (Documentation & Handover): Documentation & CMDB: Final Configs (Switch/Server), Topology/Patch Plans, IP Tables, Serial Number/Asset Lists, Before/After Photos
Acceptance & Sign-off: UAT Protocols, Functional Evidence (Use Cases), Return/Reuse of Old Hardware
Lessons Learned: Risks, Standard Packages, Driver Freeze, "Known Issues"
Interfaces/Communication: Station IT, Airport IT, SOC/NOC, Ground Ops/Ramp/Check-in, Providers (SITA/Amadeus). ITSM: ServiceNow (Inc/Req/Change/KB), Handover to BAU
André G.
Last position:
IT Consulting Project Management / Engineering Subproject Management at T-Systems (on assignment for government agencies)
- Projects for federal networks (NdB).
- CR management, EoL change requests, design and documentation according to ITSCM.
- Data center planning.
- Project management and engineering subproject management.
- Software development for virtual server environments according to BSI.
Charles J.
Last position:
Network Architect at RedGlobal GmbH
- Configuration of Dell switches, routers, and access points.
- Troubleshooting and issue resolution.
- Extreme, Cisco and Dell switches and routers environment, Extreme A3 NAC, Extreme CloudIQ.
Tony R.
Last position:
Network Expert at Self-employed
- Consulting and execution of migration from Cisco AireOS to Cisco IOS-XE controller
- Solution design
- Configuration and staff training
- Products: Catalyst Center, Cisco controllers and IOS and COS access points, 9800-40, 5520, 8510, 9120, 9136, 9166, Catalyst switches, Aruba Clearpass
- Keywords: Tags, profiles, SSIDs, 802.1X authentication, captive portal, Identity PSK (iPSK), VLANs, troubleshooting, automation, RESTCONF, NETCONF, YANG
Majid A.
Last position:
Lead Consultant at Infosys
- Network automation
- CI/CD and Docker environment
- Python Nornir for network automation
- pyATS for monitoring and test case automation
- Network Access Control (Radius) and Device Admin Access Control (TACACS) with AAA and Cisco ISE with Cisco/HP/Aruba Devices
- Cisco ISE Clusters (2/4/8 nodes) configuration
- Cisco ISE Authentication and Authorization configuration
- Cisco/HP/Aruba Switch/WLC Tacacs/dot1x/Radius configuration
- Cisco ISE automation with Restconf and Python
Jens M.
Last position:
Apple IT Training Trainer at Apple
- Extensive travel in Germany and abroad for Apple IT training
- Training from version 10.5 Leopard to macOS Sonoma
Sami B.
Last position:
German Customer (Pharma Supply-Chain Sector)
- Integration of a FortiManager into the existing FortiGate firewall infrastructure to centralize and optimize firewall management.
Abdelhak M.
Last position:
Network Architect at Bechtle Managed Services GmbH
- Created as-is network documentation for a Bechtle customer
- Analyzed existing configurations and adjusted them
- Advised on Fortinet and Check Point products
- Troubleshot complex routing, switching and application issues
- Tools: MS Azure, FortiManager, Cisco Nexus & Catalyst, Cisco WLAN Controller, Citrix Netscaler SD-WAN, MS Visio, Checkpoint VSX, Wireshark
Christian W.
Last position:
Cisco Catalyst Center - SDA Wireless Consultant at IT Service Provider
- Implementation of Cisco Catalyst Center wireless network for a federal ministry in Berlin with focus on wireless topics
- Troubleshooting of day 0, day 1 and ongoing templates for zero-touch provisioning of switches and access points
- Client authentication and authorization troubleshooting using Cisco ISE
- Wireless guest access via Cisco ISE captive portals
- Ekahau site surveys and WLAN survey reports
- Cisco DNA Center, Cisco WLC and Cisco ISE
- LAN and WLAN network design and planning based on existing HLD and LLD documents
- C9300L and C9500 series switches, CW9166i access points
Matthias W.
Last position:
Self-employed at maweos GmbH
Discover over 15,000 top freelancers
Statistics of experts using IEEE 802.1X
Aggregated from the professional profiles of matched freelancers.
Experience
26 years
Position duration
4.2 years
Positions per freelancer
18
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Telecommunication, Manufacturing
Certification focus areas
Information Technology, Project Management, Human Resources
Bachelor's degree or higher
64%
Master's degree or higher
45%
Certifications per freelancer
7
Most common languages
German, English, Arabic
Speak two or more languages
100%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Germany using IEEE 802.1X
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
IEEE 802.1X experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (87%)
- Telecommunication (67%)
- Manufacturing (60%)
- Automotive (47%)
- Banking and Finance (47%)
- Professional Services (40%)
- Education (33%)
- Energy (33%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Port-Based Network Access Control
IEEE 802.1X provides link-layer authentication for devices connecting to enterprise local area networks. It encapsulates EAP frames over wired Ethernet or wireless media, ensuring no unauthenticated traffic reaches internal subnets. Organizations rely on it to enforce zero-trust policies at the access switch and access point layer.
Core Protocol Ecosystem and Infrastructure
The standard operates through three entities: the supplicant on the client endpoint, the authenticator on the network switch or controller, and the authentication server.
- Policy engines including Cisco ISE, Aruba ClearPass, and FreeRADIUS
- Protocol variants such as EAP-TLS, PEAP-MSCHAPv2, and EAP-TTLS
- Identity backends spanning Microsoft Active Directory and OpenLDAP
- Public key infrastructure for automated client certificate enrollment via SCEP or EST
Enterprise Implementations across Germany
German automotive, manufacturing, and financial enterprises deploy dot1x to safeguard campus networks and industrial shop floors. Implementations often pair dynamic VLAN assignment with downloadable access control lists to isolate unmanaged IoT hardware and operational technology devices from sensitive production infrastructure.
Typical Project Triggers
- Migration from shared pre-shared keys to certificate-based corporate Wi-Fi
- Compliance audits requiring strict hardware-level identity verification
- Consolidation of multi-vendor switching infrastructure across distributed branches
- Replacement of legacy MAC Authentication Bypass with automated device onboarding
Distinguishing Traits of Senior Specialists
Seasoned professionals anticipate edge cases such as pre-logon computer authentication, PXE boot constraints, and headless printer onboarding. They build fallback mechanisms like critical authentication VLANs to prevent site-wide network lockouts during upstream server outages, validating supplicant behaviors across Windows, macOS, Linux, and mobile operating systems.
Delivery Models and Collaboration
Architecture planning, RADIUS policy design, and certificate authority integrations proceed smoothly in remote setups. German enterprises frequently request temporary on-site presence for physical switchport cutovers, local lab staging, and testing across complex campus distribution plants.
Frequently asked questions
Key details about IEEE 802.1X, drawn from the questions we get asked most.
The IEEE 802.1X standard blocks rogue devices from gaining access to local network ports before authenticating. It prevents physical tampering, enforces per-user access rights, and replaces vulnerable shared passwords on enterprise Wi-Fi networks with certificate-based identity verification.
While dot1x uses cryptographic validation through protocols like EAP-TLS, MAC Authentication Bypass relies solely on hardware addresses that unauthorized actors can easily spoof. Network professionals use MAB only as an exception for legacy printers or smart meters that lack native supplicant software.
A capable practitioner in 802.1X network access control must understand enterprise PKI, Active Directory, RADIUS server administration, and DNS/DHCP infrastructure. Familiarity with mobile device management platforms is also critical to push supplicant profiles and user certificates to target endpoints.
Deployments running IEEE 802.1X achieve maximum security using EAP-TLS. This method requires mutual certificate validation between the client endpoint and the authentication server, entirely eliminating credential harvesting risks associated with password-based protocols.
Design, RADIUS policy drafting, and certificate lifecycle planning for IEEE 802.1X work effectively in remote environments. However, initial pilot phases, switch firmware upgrades, and physical cutovers at branch offices in Germany often require localized on-site testing to resolve hardware-specific anomalies.
Experienced professionals introduce dot1x in monitor mode before enforcing hard port blocks. This passive phase logs authentication failures and identifies misconfigured supplicants without interrupting corporate connectivity, allowing seamless remediation before switching ports into closed mode.
A production rollout of IEEE 802.1X typically spans several months depending on fleet homogeneity and PKI readiness. The majority of time involves staging endpoint profiles, testing headless peripheral devices, and refining dynamic authorization rules rather than configuring the access switches.
Regulatory frameworks such as BSI IT-Grundschutz require German organizations to restrict physical interface access and authenticate internal network connections. Applying IEEE 802.1X fulfills these baseline technical requirements by establishing unambiguous device identity tracking across all corporate interfaces.
The average hourly rate of freelancers in Germany who have used IEEE 802.1X in their recent projects is 105 €, which corresponds to a daily rate of about 840 € based on an 8-hour working day.
Of the freelancers in Germany who have used IEEE 802.1X in their recent projects, 64% hold at least a Bachelor's degree and 45% hold at least a Master's degree.
On average, freelancers in Germany who have used IEEE 802.1X in their recent projects have 26 years of professional experience, with a single engagement typically lasting around 4.2 years.
The most common languages among freelancers in Germany who have used IEEE 802.1X in their recent projects are German (100%), English (100%), and Arabic (13%).
The most common industries among freelancers in Germany who have used IEEE 802.1X in their recent projects are Information Technology (87%), Telecommunication (67%), and Manufacturing (60%).
The most common business areas among freelancers in Germany who have used IEEE 802.1X in their recent projects are Information Technology (100%), Operations (80%), and Project Management (80%).
Main locations of FRATCH Experts, who have recently used IEEE 802.1X
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
